@intentius/chant-lexicon-k8s 0.34.1 → 0.36.0

package/dist/types/index.d.ts

@@ -4,7 +4,8 @@
 
 export declare class Alert {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** AlertSpec defines an alerting rule for events involving a list of objects. */
     spec?: Record<string, unknown>;
   });
@@ -89,9 +90,10 @@ export declare class APIVersions {
 
 export declare class Application {
   constructor(props: {
-    metadata: Record<string, unknown>;
     /** ApplicationSpec represents desired application state. Contains link to repository with application definition and additional parameters link definition revision. */
     spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** Operation contains information about a requested or running operation */
     operation?: Record<string, unknown>;
   });
@@ -103,8 +105,9 @@ export declare class Application {
 
 export declare class ApplicationSet {
   constructor(props: {
-    metadata: Record<string, unknown>;
     spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -114,9 +117,10 @@ export declare class ApplicationSet {
 
 export declare class AppProject {
   constructor(props: {
-    metadata: Record<string, unknown>;
     /** AppProjectSpec is the specification of an AppProject */
     spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -150,7 +154,8 @@ export declare class Binding {
 
 export declare class Bucket {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** BucketSpec specifies the required configuration to produce an Artifact for
 an object storage bucket. */
     spec?: Record<string, unknown>;
@@ -163,7 +168,8 @@ an object storage bucket. */
 
 export declare class Certificate {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** Specification of the desired state of the Certificate resource.
 https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
     spec?: Record<string, unknown>;
@@ -176,7 +182,8 @@ https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions
 
 export declare class CertificateRequest {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** Specification of the desired state of the CertificateRequest resource.
 https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
     spec?: Record<string, unknown>;
@@ -211,8 +218,9 @@ export declare class CertificateSigningRequestList {
 
 export declare class Challenge {
   constructor(props: {
-    metadata: Record<string, unknown>;
     spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -224,7 +232,8 @@ export declare class ClusterIssuer {
   constructor(props: {
     /** Desired state of the ClusterIssuer resource. */
     spec: Record<string, unknown>;
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -416,7 +425,8 @@ export declare class CoreEventList {
 
 export declare class CrdbCluster {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** CrdbClusterSpec defines the desired state of a CockroachDB Cluster that the operator maintains. */
     spec?: Record<string, unknown>;
   });
@@ -884,7 +894,8 @@ export declare class FlowSchemaList {
 
 export declare class FluxInstance {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** FluxInstanceSpec defines the desired state of FluxInstance */
     spec?: Record<string, unknown>;
   });
@@ -896,7 +907,8 @@ export declare class FluxInstance {
 
 export declare class FluxReport {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** FluxReportSpec defines the observed state of a Flux installation. */
     spec?: Record<string, unknown>;
   });
@@ -910,7 +922,8 @@ export declare class Gateway {
   constructor(props: {
     /** Spec defines the desired state of Gateway. */
     spec: Record<string, unknown>;
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -922,7 +935,8 @@ export declare class GatewayClass {
   constructor(props: {
     /** Spec defines the desired state of GatewayClass. */
     spec: Record<string, unknown>;
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -932,7 +946,8 @@ export declare class GatewayClass {
 
 export declare class GitRepository {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** GitRepositorySpec specifies the required configuration to produce an
 Artifact for a Git repository. */
     spec?: Record<string, unknown>;
@@ -945,7 +960,8 @@ Artifact for a Git repository. */
 
 export declare class GRPCRoute {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** Spec defines the desired state of GRPCRoute. */
     spec?: Record<string, unknown>;
   });
@@ -957,7 +973,8 @@ export declare class GRPCRoute {
 
 export declare class HelmChart {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** HelmChartSpec specifies the desired state of a Helm chart. */
     spec?: Record<string, unknown>;
   });
@@ -969,7 +986,8 @@ export declare class HelmChart {
 
 export declare class HelmRelease {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** HelmReleaseSpec defines the desired state of a Helm release. */
     spec?: Record<string, unknown>;
   });
@@ -981,7 +999,8 @@ export declare class HelmRelease {
 
 export declare class HelmRepository {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** HelmRepositorySpec specifies the required configuration to produce an
 Artifact for a Helm repository index YAML. */
     spec?: Record<string, unknown>;
@@ -1032,7 +1051,8 @@ export declare class HTTPRoute {
   constructor(props: {
     /** Spec defines the desired state of HTTPRoute. */
     spec: Record<string, unknown>;
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -1042,7 +1062,8 @@ export declare class HTTPRoute {
 
 export declare class ImagePolicy {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** ImagePolicySpec defines the parameters for calculating the
 ImagePolicy. */
     spec?: Record<string, unknown>;
@@ -1055,7 +1076,8 @@ ImagePolicy. */
 
 export declare class ImageRepository {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** ImageRepositorySpec defines the parameters for scanning an image
 repository, e.g., `fluxcd/flux`. */
     spec?: Record<string, unknown>;
@@ -1068,7 +1090,8 @@ repository, e.g., `fluxcd/flux`. */
 
 export declare class ImageUpdateAutomation {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** ImageUpdateAutomationSpec defines the desired state of ImageUpdateAutomation */
     spec?: Record<string, unknown>;
   });
@@ -1166,7 +1189,8 @@ export declare class Issuer {
   constructor(props: {
     /** Desired state of the Issuer resource. */
     spec: Record<string, unknown>;
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -1200,7 +1224,8 @@ export declare class JobList {
 
 export declare class Kustomization {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** KustomizationSpec defines the configuration to calculate the desired state
 from a Source using Kustomize. */
     spec?: Record<string, unknown>;
@@ -1295,6 +1320,65 @@ export declare class LocalSubjectAccessReview {
   readonly uid: string;
 }
 
+export declare class MicroVM {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
+export declare class MicroVMClass {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly uid: string;
+}
+
+export declare class MicroVMImage {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
+export declare class MicroVMNetwork {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
+export declare class MicroVMReplicaSet {
+  constructor(props: {
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
+    spec?: Record<string, unknown>;
+  });
+  readonly name: string;
+  readonly namespace: string;
+  readonly status: Record<string, unknown>;
+  readonly uid: string;
+}
+
 export declare class MutatingAdmissionPolicy {
   constructor(props: {
     /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
@@ -1465,7 +1549,8 @@ export declare class NS {
 
 export declare class OCIRepository {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** OCIRepositorySpec defines the desired state of OCIRepository */
     spec?: Record<string, unknown>;
   });
@@ -1477,8 +1562,9 @@ export declare class OCIRepository {
 
 export declare class Order {
   constructor(props: {
-    metadata: Record<string, unknown>;
     spec: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -1700,7 +1786,8 @@ export declare class PrometheusRule {
   constructor(props: {
     /** Specification of desired alerting rule definitions for Prometheus. */
     spec: Record<string, unknown>;
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;
@@ -1709,7 +1796,8 @@ export declare class PrometheusRule {
 
 export declare class Provider {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** ProviderSpec defines the desired state of the Provider. */
     spec?: Record<string, unknown>;
   });
@@ -1744,7 +1832,8 @@ export declare class PVC {
 
 export declare class RayCluster {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     spec?: Record<string, unknown>;
   });
   readonly name: string;
@@ -1755,7 +1844,8 @@ export declare class RayCluster {
 
 export declare class RayJob {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     spec?: Record<string, unknown>;
   });
   readonly name: string;
@@ -1766,7 +1856,8 @@ export declare class RayJob {
 
 export declare class RayService {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     spec?: Record<string, unknown>;
   });
   readonly name: string;
@@ -1777,7 +1868,8 @@ export declare class RayService {
 
 export declare class Receiver {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** ReceiverSpec defines the desired state of the Receiver. */
     spec?: Record<string, unknown>;
   });
@@ -1789,7 +1881,8 @@ export declare class Receiver {
 
 export declare class ReferenceGrant {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** Spec defines the desired state of ReferenceGrant. */
     spec?: Record<string, unknown>;
   });
@@ -1922,7 +2015,8 @@ export declare class ResourceQuotaList {
 
 export declare class ResourceSet {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** ResourceSetSpec defines the desired state of ResourceSet */
     spec?: Record<string, unknown>;
   });
@@ -1934,7 +2028,8 @@ export declare class ResourceSet {
 
 export declare class ResourceSetInputProvider {
   constructor(props: {
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
     /** ResourceSetInputProviderSpec defines the desired state of ResourceSetInputProvider */
     spec?: Record<string, unknown>;
   });
@@ -2240,7 +2335,8 @@ export declare class ServiceMonitor {
     /** Specification of desired Service selection for target discovery by
 Prometheus. */
     spec: Record<string, unknown>;
-    metadata?: Record<string, unknown>;
+    /** Standard object's metadata. */
+    metadata?: ObjectMeta;
   });
   readonly name: string;
   readonly namespace: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-k8s",
-  "version": "0.34.1",
+  "version": "0.36.0",
   "description": "Kubernetes lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",

package/src/codegen/docs.ts

@@ -1151,6 +1151,13 @@ The lexicon also provides MCP (Model Context Protocol) tools and resources:
     ],
     basePath: "/chant/lexicons/k8s/",
     sidebarExtra: [
+      {
+        label: "Live Cluster",
+        items: [
+          { label: "The API Client", slug: "api-client" },
+          { label: "chant kube", slug: "kube" },
+        ],
+      },
       { label: "CRD-Generated Classes", slug: "crd-classes" },
       { label: "Argo CD Composites", slug: "argo-composites" },
       {

package/src/crd/crd-sources.ts

@@ -150,6 +150,28 @@ const FLUX_TOOLKIT_INSTALL = `https://github.com/fluxcd/flux2/releases/download/
 const FLUX_OPERATOR_VERSION = "v0.54.1";
 const FLUX_OPERATOR_INSTALL = `https://github.com/controlplaneio-fluxcd/flux-operator/releases/download/${FLUX_OPERATOR_VERSION}/install.yaml`;
 
+/**
+ * KubeMicroVM CRDs — lambda.aws.amazon.com/v1alpha1
+ *
+ * Produces (the group is mapped to the `KubeMicroVM` namespace — see
+ * GROUP_NAMESPACE_OVERRIDES in crd/parser.ts):
+ *   K8s::KubeMicroVM::MicroVM            → kind: MicroVM
+ *   K8s::KubeMicroVM::MicroVMImage       → kind: MicroVMImage
+ *   K8s::KubeMicroVM::MicroVMNetwork     → kind: MicroVMNetwork
+ *   K8s::KubeMicroVM::MicroVMClass       → kind: MicroVMClass
+ *   K8s::KubeMicroVM::MicroVMReplicaSet  → kind: MicroVMReplicaSet
+ *
+ * Sourced from the chart rather than a raw URL: the operator is built with
+ * the Java operator SDK, which generates CRDs at build time, and only
+ * `microvmclasses` is committed to their repo. All five are in the published
+ * chart.
+ *
+ * Operator install: helm install kube-microvm-operator
+ *   oci://ghcr.io/codriverlabs/helm/kube-microvm-operator --version 1.0.11
+ */
+const KUBEMICROVM_CHART = "oci://ghcr.io/codriverlabs/helm/kube-microvm-operator";
+const KUBEMICROVM_VERSION = "1.0.11";
+
 export const CRD_SOURCES: CRDSource[] = [
   { type: "url", url: `${KUBERAY_CRD_BASE}/ray.io_rayclusters.yaml` },
   { type: "url", url: `${KUBERAY_CRD_BASE}/ray.io_rayjobs.yaml` },
@@ -190,4 +212,10 @@ export const CRD_SOURCES: CRDSource[] = [
     url: FLUX_OPERATOR_INSTALL,
     kinds: ["FluxInstance", "FluxReport", "ResourceSet", "ResourceSetInputProvider"],
   },
+  {
+    type: "helm",
+    chart: KUBEMICROVM_CHART,
+    version: KUBEMICROVM_VERSION,
+    kinds: ["MicroVM", "MicroVMImage", "MicroVMNetwork", "MicroVMClass", "MicroVMReplicaSet"],
+  },
 ];

package/src/crd/loader.test.ts

@@ -58,3 +58,25 @@ describe("loadCRDs kinds allowlist", () => {
     expect(all.map((r) => r.gvk.kind).sort()).toEqual(["ExternalArtifact", "GitRepository"]);
   });
 });
+
+describe("helm CRD source", () => {
+  test("requires a chart", async () => {
+    await expect(loadCRDs({ type: "helm", version: "1.0.0" })).rejects.toThrow(
+      /requires a 'chart' property/,
+    );
+  });
+
+  // An unpinned chart makes generated output depend on the day it was
+  // generated, which is the property every other source here preserves.
+  test("requires a version", async () => {
+    await expect(loadCRDs({ type: "helm", chart: "oci://example.invalid/c" })).rejects.toThrow(
+      /requires a 'version' property/,
+    );
+  });
+
+  test("says what to do when helm is missing or the pull fails", async () => {
+    await expect(
+      loadCRDs({ type: "helm", chart: "oci://example.invalid/nope", version: "0.0.1" }),
+    ).rejects.toThrow(/helm (pull failed|not found on PATH)/);
+  });
+});

package/src/crd/loader.ts

@@ -47,6 +47,8 @@ async function fetchCRDContent(source: CRDSource): Promise<string> {
       return loadFromURL(source);
     case "cluster":
       return loadFromCluster(source);
+    case "helm":
+      return loadFromHelmChart(source);
     default:
       throw new Error(`Unsupported CRD source type: ${(source as CRDSource).type}`);
   }
@@ -81,6 +83,87 @@ async function loadFromURL(source: CRDSource): Promise<string> {
   return response.text();
 }
 
+/**
+ * Load CRDs out of a Helm chart, by pulling and unpacking it.
+ *
+ * Helm's own convention is that CRDs live in a chart's `crds/` directory and
+ * are applied before templates, so that is the default place to look. Every
+ * YAML document found there is concatenated into one multi-doc string, which
+ * the parser already handles, and the existing `kinds` allowlist then applies
+ * unchanged — a chart carrying more CRDs than a consumer wants is the same
+ * situation as Flux's install bundle.
+ *
+ * Needs the `helm` binary at generation time, the same shape of dependency
+ * that type="cluster" has on `kubectl`.
+ */
+async function loadFromHelmChart(source: CRDSource): Promise<string> {
+  if (!source.chart) {
+    throw new Error("CRD source type 'helm' requires a 'chart' property");
+  }
+  if (!source.version) {
+    throw new Error(
+      `CRD source type 'helm' requires a 'version' property (chart: ${source.chart}). ` +
+      "An unpinned chart makes generated output depend on when it was generated.",
+    );
+  }
+
+  const { execFile } = await import("child_process");
+  const { promisify } = await import("util");
+  const { mkdtempSync, rmSync, readdirSync, readFileSync: read } = await import("fs");
+  const { join } = await import("path");
+  const { tmpdir } = await import("os");
+  const execFileAsync = promisify(execFile);
+
+  const workdir = mkdtempSync(join(tmpdir(), "chant-crd-helm-"));
+  try {
+    await execFileAsync("helm", [
+      "pull", source.chart,
+      "--version", source.version,
+      "--untar",
+      "--untardir", workdir,
+    ]).catch((err: NodeJS.ErrnoException & { stderr?: string }) => {
+      if (err.code === "ENOENT") {
+        throw new Error(
+          `helm not found on PATH, needed to read CRDs from ${source.chart}. ` +
+          "Install helm, or vendor the CRDs and use a 'file' source.",
+        );
+      }
+      throw new Error(
+        `helm pull failed for ${source.chart} ${source.version}: ${err.stderr?.trim() || err.message}`,
+      );
+    });
+
+    // --untar writes a single directory named after the chart, which need not
+    // match the last segment of the reference, so read it rather than guess.
+    const unpacked = readdirSync(workdir, { withFileTypes: true }).filter((e) => e.isDirectory());
+    if (unpacked.length !== 1) {
+      throw new Error(
+        `expected one unpacked chart directory in ${workdir}, found ${unpacked.length}`,
+      );
+    }
+
+    const subdir = source.chartSubdir ?? "crds";
+    const crdDir = join(workdir, unpacked[0].name, subdir);
+
+    let entries: string[];
+    try {
+      entries = readdirSync(crdDir).filter((f) => f.endsWith(".yaml") || f.endsWith(".yml")).sort();
+    } catch {
+      throw new Error(
+        `chart ${source.chart} ${source.version} has no '${subdir}' directory. ` +
+        "Charts that template their CRDs instead of shipping them in crds/ need 'chartSubdir'.",
+      );
+    }
+    if (entries.length === 0) {
+      throw new Error(`chart ${source.chart} ${source.version} has no CRD YAML in '${subdir}'`);
+    }
+
+    return entries.map((f) => read(join(crdDir, f), "utf8")).join("\n---\n");
+  } finally {
+    rmSync(workdir, { recursive: true, force: true });
+  }
+}
+
 /**
  * Load CRDs from a live Kubernetes cluster via kubectl.
  *

package/src/crd/parser.test.ts

@@ -201,6 +201,63 @@ describe("parseCRDSpec", () => {
     expect(props.some((p) => p.name === "metadata")).toBe(true);
   });
 
+  test("emits metadata even when the schema declares only spec and status", () => {
+    // The shape the Fabric8 CRDGenerator produces, and what KubeMicroVM's five
+    // CRDs ship — no `metadata` in openAPIV3Schema at all. Without this the
+    // generated class had no way to set a name or a namespace.
+    const spec = {
+      group: "lambda.aws.amazon.com",
+      names: { kind: "MicroVM", plural: "microvms" },
+      scope: "Namespaced" as const,
+      versions: [
+        {
+          name: "v1alpha1",
+          served: true,
+          storage: true,
+          schema: {
+            openAPIV3Schema: {
+              type: "object",
+              properties: {
+                spec: { type: "object", properties: { imageRef: { type: "string" } } },
+                status: { type: "object", properties: { state: { type: "string" } } },
+              },
+            },
+          },
+        },
+      ],
+    };
+
+    const props = parseCRDSpec(spec)[0].resource.properties;
+    const metadata = props.find((p) => p.name === "metadata");
+    expect(metadata?.tsType).toBe("ObjectMeta");
+    expect(metadata?.required).toBe(false);
+  });
+
+  test("a schema-declared metadata does not produce a duplicate", () => {
+    const spec = {
+      group: "cert-manager.io",
+      names: { kind: "Certificate", plural: "certificates" },
+      scope: "Namespaced" as const,
+      versions: [
+        {
+          name: "v1",
+          served: true,
+          storage: true,
+          schema: {
+            openAPIV3Schema: {
+              type: "object",
+              properties: { metadata: { type: "object" }, spec: { type: "object" } },
+            },
+          },
+        },
+      ],
+    };
+
+    const metadataProps = parseCRDSpec(spec)[0].resource.properties.filter((p) => p.name === "metadata");
+    expect(metadataProps.length).toBe(1);
+    expect(metadataProps[0].tsType).toBe("ObjectMeta");
+  });
+
   test("normalizeGroupName converts cert-manager.io to CertManager", () => {
     const spec = {
       group: "cert-manager.io",